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Abstract Cooperation among wireless nodes has been recently proposed for improving the physical layer (PHY) security of 
wireless transmission in the presence of multiple eavesdroppers. While existing PHY security literature answered the question 
^ ' "what are the link-level secrecy rate gains from cooperation?", this paper attempts to answer the question of "how to achieve 

those gains in a practical decentralized wireless network and in the presence of a cost for information exchange?". For this 
' purpose, we model the PHY security cooperation problem as a coalitional game with non-transferable utility and propose a 

distributed algorithm for coalition formation. Through the proposed algorithm, the wireless users can cooperate and self-organize 
into disjoint independent coalitions, while maximizing their secrecy rate taking into account the security costs during information 
exchange. We analyze the resulting coalitional structures for both decode-and-forward and amplify-and-forward cooperation and 
study how the users can adapt the network topology to environmental changes such as mobility. Through simulations, we assess 
the performance of the proposed algorithm and show that, by coalition formation using decode-and-forward, the average secrecy 
rate per user is increased of up to 25.3% and 24.4% (for a network with 45 users) relative to the non-cooperative and amplify- 
and-forward cases, respectively. 
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i^" | 1 Introduction 

With the recent emergence of ad hoc and decentralized networks, higher-layer security techniques such as encryption have 
| become hard to implement. This led to an increased attention on studying the ability of the physical layer (PHY) to provide 

■ secure wireless communication. The main idea is to exploit the wireless channel PHY characteristics such as fading or noise 

for improving the reliability of wireless transmission. This reliability is quantified by the rate of secret information sent from 
a wireless node to its destination in the presence of eavesdroppers, i.e., the so called secrecy rate. The maximal achievable 
' secrecy rate is referred to as the secrecy capacity. The study of this security aspect began with the pioneering work of Wyner 

over the wire-tap channel [1] and was followed up in [2,3] for the scalar Gaussian wire-tap channel and the broadcast channel, 
respectively. 

Recently, there has been a growing interest in carrying out these studies unto the wireless and the multi-user channels [4-10]. 
For instance, in [4] and [5], the authors study the secrecy capacity region for both the Gaussian and the fading broadcast channels 
and propose optimal power allocation strategies. In [6], the secrecy level in multiple access channels from a link-level perspective 
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Coalition 2 Cooperative TDMA transmission: 1 coalition per slot (transmitting the data of the slot owner) 
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Fig. 1 System model for physical layer security coalitional game. 

is studied. Further, multiple antenna systems have been proposed in [8] for ensuring a non-zero secrecy capacity. The work 
in [9, 10] presents a performance analysis for using cooperative beamforming (with no cost for cooperation), with decode-and- 
forward and amplify-and-forward relaying, to improve the secrecy rate of a single cluster consisting of one source node and 
a number of relays. Briefly, the majority of the existing literature is devoted to the information theoretic analysis of link-level 
performance gains of secure communications with no information exchange cost, notably when a source node cooperate with 
some relays as in [9, 10]. While this literature studied the performance of some cooperative schemes, no work seems to have 
investigated how a number of users, each with its own data, can interact and cooperate at network-wide level to improve their 
secrecy rate. 

The main contribution of this work is to propose distributed cooperation strategies, through coalitional game theory [11], 
which allow to study the interactions between a network of users that seek to secure their communication in the presence of 
multiple eavesdroppers. Another major contribution is to study the impact on the network topology and dynamics of the inherent 
tradeoff that exists between the PHY security cooperation gains in terms of secrecy rate and the information exchange costs. 
In other words, while the earlier work answered the question "what are the secrecy rate gains from cooperation?", here, we 
seek to answer the question of "how to achieve those gains in a practical decentralized wireless network and in the presence 
of a cost for information exchange?". We model the problem as a non-transferable coalitional game and propose a distributed 
algorithm for autonomous coalition formation based on well suited concepts from cooperative games. Through the proposed 
algorithm, each user autonomously decides to form or break a coalition for maximizing its utility in terms of secrecy rate while 
accounting for the loss of secrecy rate during information exchange. We show that independent disjoint coalitions form in the 
network, due to the cooperation cost, and we study their properties for both the decode-and-forward and amplify-and-forward 
cooperation models. Simulation results show that, by coalition formation using decode-and-forward, the average secrecy rate per 
user is increased of up to 25.3% and 24.4% relative to the non-cooperative and amplify-and-forward cases, respectively. Further, 
the results show how the users can self-organize and adapt the topology to mobility. 

The rest of this paper is organized as follows: Section[2]presents the system model. Section[3]presents the game formulation 
and properties. In Section|4]we devise the coalition formation algorithm. Simulation results are presented and analyzed in Section 
[5] Finally, conclusions are drawn in Section|6] 

2 System Model 

Consider a network having N transmitters (e.g. mobile users) sending data to M receivers (destinations) in the presence of 
K eavesdroppers that seek to tap into the transmission of the users. Users, receivers and eavesdroppers are unidirectional- 
single-antenna nodes. We define M — {1, . . . , N}, M. = {1, . . . , M} and /C = {1, . . . , K} as the sets of users, destinations, 
and eavesdroppers, respectively. In this work, we consider only the case of multiple eavesdroppers, hence, we have K > 1. 
Furthermore, let h i m . denote the complex baseband channel gain between user i 6 M and its destination m, 6 jM and 
<7j k denote the channel gain between user i 6 TV and eavesdropper k 6 /C. We consider a line of sight channel model with 

hi^ mi = d i ,^.e " H with d i m . the distance between user i and its destination m„ fi the pathloss exponent, and 4>i, mi the phase 
offset. A similar model is used for the user-eavesdropper channel. Note that other channel models can also be accommodated. 

Further, we consider a TDMA transmission, whereby, in a non-cooperative manner, each user occupies a single time slot. 
Within a single slot, the amount of reliable information transmitted from the user i occupying the slot to its destination mj is 
quantified through the secrecy rate Ci iTTli defined as follows [4]: 

Cj, mj = I C^ mi - max Cf ik J , (1) 

where Cf m . is the capacity for the transmission between user i and its destination m, 6 M, Cf k is the capacity of user i at the 
eavesdropper k G /C, and a + = max (a, 0). Note that the secrecy rate in (fl} is shown to be achievable in [12] using Gaussian 
inputs. 
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In a non-cooperative approach, due to the broadcast nature of the wireless channel, the transmission of the users can be 
overheard by the eavesdroppers which reduces their secrecy rate as clearly expressed in ([TJ. For improving their performance 
and increasing their secrecy rate, the users can collaborate by forming coalitions. Within every coalition, the users can utilize 
collaborative beamforming techniques for improving their secrecy rates. In this context, every user i member of a coalition S 
can cooperate with its partners in S by dividing its slot into two durations: 

1. In the first duration, user i broadcasts its data to the other members of coalition S. 

2. In the second duration, coalition S performs collaborative beamforming. Thus, all the members of coalition S relay a 
weighted version of user i's signal to its destination. 

Although finding an optimal cooperation scheme that maximizes the secrecy rate is quite complex [9], one approach for cooper- 
ation is to null the signal at the eavesdroppers, i.e., impose Cf k = 0, Vfc G /C, hence, improving their secrecy rate as compared 
to the non-cooperative rate in (O [9]. Each coalition S C J\f that forms in the network is able to transmit within all the time slots 
previously held by its users. Thus, in the presence of cooperating coalitions, the TDMA system schedules one coalition per time 
slot. During a given slot, the coalition acts as a single entity for transmitting the data of the user that owns the slot. Fig.[TJshows 
an illustration of this model for N = 9 users, M = 2 destinations, and K — 2 eavesdroppers. 

Furthermore, we define a fixed transmit power per time slot P which constrains all the users that are transmitting within a 
given slot. In a non-cooperative manner, this power constraint applies to the single user occupying the slot, while in a cooperative 
manner this same power constraint applies to the entire coalition occupying the slot. Such a power assumption is typical in 
TDMA systems comprising mobile users and is a direct result of ergodicity and the time varying user locations [13-15]. For 
every coalition S, during the time slot owned by user i G S, user i utilizes a portion of the available power P for information 
exchange (first stage) while the remaining portion Pf is used by the coalition S to transmit the actual data to the destination 
mi of user i (second stage). For information exchange, user i £ S can broadcast its information to the farthest user i £ S, by 
doing so all the other members of S can also obtain the information due to the broadcast nature of the wireless channel. This 
information exchange incurs a power cost P. ~. given by 

Pn= v -r4> (2) 

where u is a target average signal-to-noise ratio (SNR) for information exchange, a 1 is the noise variance and q i j is the channel 

gain between users i and i. The remaining power that coalition S utilizes for the transmission of the data of user i during the 
remaining time of this user's slot is 

P s = (p_p ii ,)+. (3) 

For every coalition S, during the transmission of the data of user i to its destination, the coalition members can cooperate, 
using either decode-and-forward (DF) or amplify-and-forward (AF), and, hence, weigh their signals in a way to completely 
null the signal at the eavesdroppers. In DF, the coalition members that are acting as relays decode the received signal in the 
information exchange phase, then re-encode it before performing beamforming. In contrast, for AF, coalition members that 
are acting as relays perform beamforming by weighing the noisy version of the received signal in the information exchange 
phase. For any coalition S the signal weights and the "user-destination" channels are represented by the \S\ x 1 vectors wg — 
[wi 1 , . . . , tuj| g , ] H and h$ = [h^ >mi , . . . , foj, s , ,m\ S \ 1 > respectively. By nulling the signals at the eavesdropper through DF 
cooperation within coalition S, the secrecy rate achieved by user i 6 S at its destination itij during user i's time slot becomes [9, 
Eq. (14)] 

/ / *,DF\H r, *,DF 
,S>DF _ 1 - h , ( W S ) R S W S 



where R,s ~ hghg , a 1 is the noise variance, and w* s ' DF is the weight vector that maximizes the secrecy rate while nulling the 
signal at the eavesdropper with DF cooperation and can be found using [9, Eq. (20)]. In Q, the factor \ accounts for the fact 
that half of the slot of user i is reserved for information exchange. 

For AF, we define, during the transmission slot of a user i 6 S member of a coalition S, the l^l x 1 vector a s with every 

element a l s j — \J ~l1i>jhj,mj > ^3 / * is me channel between users i and j and P i j is the power used by user i for 

information exchange as per (O) and a l s>i = ^JP i ~ihi >mi and the \S\ x \S\ diagonal matrix U l s with every diagonal element 

usjj = \hj,mj\ 2 Vj 7^ i and u l s i i = 0. Given these definitions and by nulling the signals at the eavesdropper through 
AF cooperation within coalition S, the secrecy rate achieved by user i 6 S at its destination m, during user i's time slot 
becomes [10, Eq. (3)] 

-i / I *AF\Hr, *,AF \ 

r S,AF_I loe L | Kg ) R ° W S ) 

2 V ( W S ) U S W S + 1 )< T / 

where R a = a^(ag) ff , and w* s ,AF is the weight vector that maximizes the secrecy rate while nulling the signal at the eaves- 
dropper with AF cooperation and can be found using [10, Eqs.(14)-(15)]. Note that for AF, as seen in $5^ there is a stronger 
dependence on the channels (through the matrix R a ) between the cooperating users in both the first and second phase of cooper- 
ation, unlike in DF, where this dependence is solely through the power in (|2]l during the information exchange phase. Further, for 
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AF, as the cooperating users amplify a noisy version of the signal, the noise is also amplified, which can reduce the cooperation 
gains, as seen through the term (w*g F ) H U 1 s w*g F . 

Further, it must be stressed that, although the models for AF and DF cooperation in © and (f5J are inspired from [9, 10], 
our work and contribution differ significantly from [9, 10]. While the work in [9, 10] is solely dedicated to finding the optimal 
weights in $4$ and (f5J, and presenting a link-level performance analysis for a single cluster of neighboring nodes with no cost 
for cooperation, our work seeks to perform a network-level analysis by modeling the interactions among a network of users 
that seek to cooperate, in order to improve their performance, using either the DF or AF protocols in the presence of costs for 
information exchange. Hence, the main focus of this paper is modeling the user's behavior, studying the network dynamics and 
topology, and analyzing the network-level aspects of cooperation in PHY security problems. In this regard, the remainder of 
this paper is devoted to investigate how a network of users can cooperate, through the protocols described in this section, and 
improve the security of their wireless transmission, i.e., their secrecy rate. 

Finally, note that, in this paper, we assume that the users have perfect knowledge of the channels to the eavesdroppers which 
is an assumption commonly used in most PHY security related literature, and as explained in [16] this channel information can be 
obtained by the users through a constant monitoring of the behavior of the eavesdroppers. Alternatively, the eavesdroppers in this 
work can also be seen as areas where the transmitters suspect the presence of malicious eavesdropping nodes and, hence, need to 
secure these locations. Hence, our current analysis can serve as an upper bound for future work where the analysis pertaining to 
the case where the eavesdroppers and their locations are not known will be tackled (in that case although the cooperation model 
needs to be modified, the PHY security coalitional game model presented in the following sections can be readily applied). 

3 Physical Layer Security as A Coalitional Game 

The proposed PHY security problem can be modeled as a (Af, V) coalitional game with a non- transferable utility [11,17] where 
V is a mapping such that for every coalition S C Af, V(S) is a closed convex subset of R' s ' that contains the payoff vectors that 
players in S can achieve. Thus, given a coalition S and denoting by <f>i (S) the payoff of user i £ S during its time slot, we define 
the coalitional value set, i.e., the mapping V as follows 

V(S) = {0(5) G R |s| | Vi G S MS) = (v,(S) - Cl (S)) + 

if pf > 0, and <f>i(S) = -oo otherwise.}, (6) 

where Vi (S) — Cf m . is the gain in terms of secrecy rate for user i G S given by l[4} while taking into account the available 
power Pf in <[3j> and Cj(S) is a secrecy cost function that captures the loss for user i G S, in terms of secrecy rate, that occurs 
during information exchange. Note that, when all the power is spent for information exchange, the payoff (f>i (S) of user i is set 
to — oo since, in this case, the user has clearly no interest in cooperating. 

With regard to the secrecy cost function Ci(S), when a user i G S sends its information to the farthest user i G S using 
a power level P i j, the eavesdroppers can overhear the transmission. This security loss is quantified by the capacity at the 

eavesdroppers resulting from the information exchange and which, for a particular eavedropper k G /C, is given by k = 
\ log (1 H — 1,1 — ) and the cost function c(S) can be defined as 

Ci(S) = max {Cfs,. . . , CIk). (7) 

In general, coalitional game based problems seek to characterize the properties and stability of the grand coalition of all 
players since it is generally assumed that the grand coalition maximizes the utilities of the players [17]. In our case, although 
cooperation improves the secrecy rate as per 46} for the users in the TDMA network; the utility in ((SJl also accounts for two 
types of cooperation costs:(i)- The fraction of power spent for information exchange as per ^ and, (ii) the secrecy loss during 
information exchange as per (fTJl which can strongly limit the cooperation gains. Therefore, for the proposed (Af, v) coalitional 
game we have: 

Property 1 For the proposed (Af, V) coalitional game, the grand coalition of all the users seldom forms due to the various 
costs for information exchange. Instead, disjoint independent coalitions will form in the network. 

Proof The proof is found in [18, Property 2]. 

Due to this property, traditional solution concepts for coalitional games, such as the core [17], may not be applicable [1 1]. In 
fact, in order for the core to exist, as a solution concept, a coalitional game must ensure that the grand coalition, i.e., the coalition 
of all players will form. However, as seen in Figure Q] and corroborated by Property Q] in general, due to the cost for coalition 
formation, the grand coalition will not form. Instead, independent and disjoint coalitions appear in the network as a result of the 
collaborative beamforming process. In this regard, the proposed game is classified as a coalition formation game [11], and the 
objective is to find the coalitional structure that will form in the network, instead of finding only a solution concept, such as the 
core, which aims mainly at stabilizing the grand coalition. 

Furthermore, for the proposed (Af, V) coalition formation game, a constraint on the coalition size, imposed by the nature of 
the cooperation protocol exists as follows: 

Remark 1 For the proposed (Af, V) coalition formation game, the size of any coalition S C Af that will form in the network 
must satisfy \S\ > K for both DF andAF cooperation. 

This is a direct result of the fact that, for nulling K eavesdroppers, at least K + 1 users must cooperate, otherwise, no weight 
vector can be found to maximize the secrecy rate while nulling the signal at the eavesdroppers. 
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Table 1 One round of the proposed PHY security coalition formation algorithm 
Initial State 

The network is partitioned by T = {Ti , . . . , T^} (At the beginning 
of all time T = AT = {1, . . . , N} with non-cooperative users). 
Three phases in each round of the coalition formation algorithm 

Phase 1 - Neighbor Discovery: 

a) Each coalition surveys its neighborhood for candidate partners. 

b) For every coalition T; , the candidate partners lie in the area 
represented by the intersection of |T»| circles with centers j £ Tj 
and radii determined by the distance where the power for 
information exchange does not exceed P for any user 

(easily computed through (2))- 
Phase 2 - Adaptive Coalition Formation: 

In this phase, coalition formation using merge-and-split occurs, 
repeat 

a) T — Merge(T); coalitions in T decide to merge based on 
the algorithm of Section POI 

b) T = Split(JF); coalitions in T decide to split based on 
the Pareto order. 

until merge-and-split terminates. 
Phase 3 - Secure Transmission: 

Each coalition's users exchange their information and transmit 
their data within their allotted slots. 
The above three phases are repeated periodically during the network operation, al- 
lowing a topology that is adaptive to environmental changes such as mobility. 



4 Distributed Coalition Formation Algorithm 

4. 1 Coalition Formation Algorithm 

Coalition formation has recently attracted increased attention in game theory [1 1, 19,20]. The goal of coalition formation games 
is to find algorithms for characterizing the coalitional structures that form in a network where the grand coalition is not optimal. 
For constructing a coalition formation process suitable to the proposed (Af, V) PHY security cooperative game, we require the 
following definitions [11,20] 

Definition 1 A collection of coalitions, denoted by S, is defined as the set S = {Si, . . . , Si} of mutually disjoint coalitions 
Si C Af. In other words, a collection is any arbitrary group of disjoint coalitions Si of Af not necessarily spanning all players of 
Af. If the collection spans all the players of Af; that is Uj=i Sj = N, the collection is a partition of Af. 

Definition 2 A preference operator or comparison relation > is an order defined for comparing two collections TZ = {R\ , . . . , 7?; } 
and S = {Si, . . . , S p } that are partitions of the same subset A C Af (i.e. same players in TZ and S). Therefore, TZ E> S implies 
that the way TZ partitions A is preferred to the way S partitions A. 

For the proposed PHY security coalition formation game, an individual value order, i.e. an order which compares the indi- 
vidual payoffs of the users, is needed due to the non-transferable utility of the game. For this purpose, for the proposed game, 
we utilize the following order for defining the preferences of the users 

Definition 3 Consider two collections TZ — {Ri, . . . , Ri} and S = {Si, . . . , S m } that are partitions of the same subset A C Af 
(same players in TZ and S). For a collection TZ = {Ri, ■ ■ ■ ,Ri}, let the utility of a player j in a coalition Rj 6 TZ be denoted by 
<Pj(TZ) — 4>j(Rj) £ V(Rj). TZ is preferred over S by Pareto order, written as TZ t> S, iff 

TZ > S <^=> {$j {TZ) > $j (S) V j G ft, <S}, 

with at least one strict inequality (>) for a player k. 

In other words, a collection is preferred by the players over another collection, if at least one player is able to improve 
its payoff without hurting the other players. Subsequently, for performing autonomous coalition formation between the users 
in the proposed PHY security game, we construct a distributed algorithm based on two simple rules denoted as "merge" and 
"split" [11,20] defined as follows. 

Definition 4 Merge Rule - Merge any set of coalitions {Si, . . . , Si} whenever the merged form is preferred by the players, i.e., 
where {U^ =1 S j }>{S 1 ,..., Si}, therefore, {S u . . . , Si} -» QJ l j=1 Sj}. 

Definition 5 Split Rule - Split any coalition Uj=i Sj whenever a split form is preferred by the players, i.e., where {Si, . . . , Si}> 
(Uj=i Sj}, thus, {l4 = i Sj} - {Si, . . . , Si}. 

Using the above rules, multiple coalitions can merge into a larger coalition if merging yields a preferred collection based on 
the Pareto order. This implies that a group of users can agree to form a larger coalition, if at least one of the users improves its 
payoff without decreasing the utilities of any of the other users. Similarly, an existing coalition can decide to split into smaller 
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coalitions if splitting yields a preferred collection by Pareto order. The rationale behind these rules is that, once the users agree 
to sign a merge agreement, this agreement can only be broken if all the users approve. This is a family of coalition formation 
games known as coalition formation games with partially reversible agreements [19]. Using the rules of merge and split is highly 
suitable for the proposed PHY security game due to many reasons. For instance, each merge or split decision can be taken in 
a distributed manner by each individual user or by each already formed coalition. Further, it is shown in [20] that any arbitrary 
iteration of merge and split rules terminates, hence, these rules can be used as building blocks in a coalition formation process 
for the PHY security game. 

Accordingly, for the proposed PHY security game, we construct a coalition formation algorithm based on merge-and-split 
and divided into three phases: Neighbor discovery, adaptive coalition formation, and transmission. In the neighbor discovery 
phase (Phase 1), each coalition (or user) surveys its environment in order to find possible cooperation candidates. For a coalition 
Sfc the area that is surveyed for discovery is the intersection of \Sk \ circles, centered at the coalition members with each circle's 
radius given by the maximum distance (for the circle centered at i e Sfc) within which the power cost for user i as given by 
iffjl does not exceed the total available power P. This area is determined by the fact that, if a number of coalitions {Si , . . . , S m } 
attempt to merge into a new coalition G = U^L 1 Si which contains a member i 6 G such that the power for information exchange 
needed by i exceeds P, then the payoff of i goes to — oo as per © and the Pareto order can never be verified. Clearly, as the 
number of users in a coalition increases, the number of circles increases, reducing the area where possible cooperation partners 
can be found. This implies that, as the size of a coalition grows, the possibility of adding new users decreases, and, hence, the 
complexity of performing merge also decreases. 

Following Phase 1, the adaptive coalition formation phase (Phase 2) begins, whereby the users interact for assessing whether 
to form new coalitions with their neighbors or whether to break their current coalition. For this purpose, an iteration of sequential 
merge-and-split rules occurs in the network, whereby each coalition decides to merge (or split) depending on the utility improve- 
ment that merging (or splitting) yields. Starting from an initial network partition T = {Ti, . . . , T ; } of Af, any random coalition 
(individual user) can start with the merge process. The coalition Tj € T which debuts the merge process starts by enumerating, 
sequentially, the possible coalitions, of size greater than K (Remark 1), that it can form with the neighbors that were discovered 
in Phase 1. On one hand, if a new coalition Ti which is preferred by the users through Pareto order is identified, this coalition 
will form by a merge agreement of all its members. Hence, the merge ends by a final merged coalition Tf nal composed of Ti and 
one or several of coalitions in its vicinity. On the other hand, if Tj is unable to merge with any of the discovered partners, it ends 
its search and lf nal = T t . 

The algorithm is repeated for the remaining Tj 6 T until all the coalitions have made their merge decisions, resulting in a 
final partition T. Following the merge process, the coalitions in the resulting partition T are next subject to split operations, if 
any is possible. In the proposed PHY security problem, the coalitions are only interested in splitting into structures that include 
either singleton users or coalitions of size larger than K or both (Remark 1). Similar to merge, the split is a local decision 
to each coalition. An iteration consisting of multiple successive merge-and-split operations is repeated until it terminates. The 
termination of an iteration of merge and split rules is guaranteed as shown in [20]. It must be stressed that the merge or split 
decisions can be taken in a distributed way by the users/coalitions without relying on any centralized entity. 

In the final transmission phase (Phase 3), the coalitions exchange their information and begin their secure transmission 
towards their corresponding destinations, in a TDMA manner, one coalition per slot. Every slot is owned by a user who transmits 
its data with the help of its coalition partners, if that user belongs to a coalition. Hence, in this phase, the user perform the actual 
beamforming, while transmitting the data of every user within its corresponding slot. Each run of the proposed algorithm consists 
of these three phases, and is summarized in Table [T] As time evolves and the users, eavesdroppers and destinations move (or 
new users or eavesdroppers enter/leave the network), the users can autonomously self-organize and adapt the network's topology 
through appropriate merge-and-split decisions during Phase 2. This adaptation to environmental changes is ensured by enabling 
the users to run the adaptive coalition formation phase periodically in the network. 

The proposed algorithm in TableQ]can be implemented in a distributed manner. As the user can detect the strength of other 
users' uplink signals (through techniques similar to those used in the ad hoc routing discovery) [21], nearby coalitions can be 
discovered in Phase 1 for potential cooperation. In fact, during Phase 1, each coalition in the network can easily work out the 
area within which candidates for merge can be found, as previously explained in this section. Once the neighbors are discovered, 
the coalitions can perform merge operations based on the Pareto order in Phase 2. The complexity of the merge operation 
can grow exponentially with the number of candidates with whom a user i is able to merge (the number of coalitions in the 
neighboring area which is in general significantly smaller than N). As more coalitions form, the area within which candidates 
are found is smaller, and, hence, the merge complexity reduces. In addition, whenever a coalition finds a candidate to merge 
with, it automatically goes through with the merge operation, hence, avoiding the need for finding all possible merge forms and 
reducing further the complexity. Further, each formed coalition can also internally decides to split if its members find a split 
form by Pareto order. By using a control channel, the distributed users can coordinate and then cooperate using our model. 

4.2 Partition Stability 

The result of the proposed algorithm in TableQ]is a network partition composed of disjoint independent coalitions. The stability 
of this network partition can be investigated using the concept of a defection function [20]. 

Definition 6 A defection function D is a function which associates with each partition T of Af a group of collections in Af. A 
partition T = {T\ , . . . , Tj} of Af is D-stable if no group of players is interested in leaving T when the players who leave can 
only form the collections allowed by D. 
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We are interested in two defection functions [11,20]. First, the D/ ip function which associates with each partition T of Af 
the group of all partitions of Af that can form through merge or split and the D c function which associates with each partition 
T of Af the group of all collections in Af. This function allows any group of players to leave the partition T of Af through 
any operation and create an arbitrary collection in Af. Two forms of stability stem from these definitions: D/j p stability and a 
stronger D c stability. A partition T is D/ lp -stable, if no player in T is interested in leaving T through merge-and-split to form 
other partitions in Af; while a partition T is D c -stable, if no player in T is interested in leaving T through any operation (not 
necessarily merge or split) to form other collections in Af. 

Hence, a partition is B/ 1)9 -stable if no coalition has an incentive to split or merge. For instance, a partition T = {T\ , . . . , T;} is 
D^p-stable, if the following two necessary and sufficient conditions are met [11,20] (ft is the non-preference operator, opposite 
of [>): (i)- For each i 6 {1, . . . , m} and for each partition {R±, . . . , R m } of Tj £ T we have {Ri, . . . , R m } ft T%, and (ii)- For 
each S C {1, . . . , 1} we have \J ieS Tj ft {Ti\i € S}. Using this definition of B hp stability, we have 

Theorem 1 Every partition resulting from our proposed coalition formation algorithm is H^p-stable. 
Proof The proof is given in [18, Theorem 1], 

Furthermore, a D c -stable partition T is characterized by being a strongly stable partition, which satisfies the following 
properties: (i)- A D c -stable partition is D^ p -stable, (ii)- A D c -stable partition is a unique outcome of any iteration of merge-and- 
split and, (iii)- A D c -stable partition T is a unique >-maximal partition, that is for all partitions T' ^ T of Af, T t> T . In the 
case where > represents the Pareto order, this implies that the D c -stable partition T is the partition that presents a Pareto optimal 
utility distribution for all the players. 

Clearly, it is desirable that the network self-organizes unto a D c -stable partition. However, the existence of a D c -stable 
partition is not always guaranteed [20]. The D c -stable partition T = {T\, . . . , T;} of the whole space Af exists if a partition of 
Af that verifies the following two necessary and sufficient conditions exists [20]: 

1. Foreachi 6 {1, ...,/} and each pair of disjoint coalitions S\ and 52 such that {S\ US2} C Tj we have {S'iUS2}>{S'i, 52}. 

2. For the partition T = {Ti, . . . , TJ} a coalition G C Af formed of players belonging to different Ti G T is T-incompatible if 
for no i £ {1, ...,/} we have G C T^. 

In summary, D c -stability requires that for all T -incompatible coalitions {G}[T] D> {G} where {G}[T] = {G n Tj V i 6 
{1, . . . , I}} is the projection of coalition G on T. If no partition of Af can satisfy these conditions, then no D c -stable partition of 
Af exists. Nevertheless, we have 

Lemma 1 For the proposed (Af, v) PHY security coalitional game, the proposed algorithm ofTable\J]converges to the optimal 
Bic-stable partition, if such a partition exists. Otherwise, the final network partition is Ti^p-stable. 

Proof The proof is a consequence of Theorem 1 and the fact that the D c -stable partition is a unique outcome of any merge-and- 
split iteration [20] which is the case with any partition resulting from our algorithm. 

Moreover, for the proposed game, the existence of the D c -stable partition cannot be always guaranteed. For instance, for 
verifying the first condition for existence of the D c -stable partition, the users that are members of each coalitions must verify the 
Pareto order through their utility given by Similarly, for verifying the second condition of D c stability, users belonging to all 
T-incompatible coalitions in the network must verify the Pareto order. Consequently, the existence of such a D c -stable partition 
is strongly dependent on the location of the users and eavesdroppers through the individual utilities (secrecy capacities). Hence, 
the existence of the D c -stable partition is closely tied to the location of the users and the eavesdroppers, which, in a practical ad 
hoc wireless network are generally random. However, the proposed algorithm will always guarantee convergence to this optimal 
D c -stable partition when it exists as stated in Lemma 1. Whenever a D c -stable partition does not exist, the coalition structure 
resulting from the proposed algorithm will be D^ p -stable (no coalition or individual user is able to merge or split any further). 

5 Simulation Results and analysis 

For simulations, a square network of 2.5 km x 2.5 km is set up with the users, eavesdroppers, and destinations randomly de- 
ployed within this arefl In this network, the users are always assigned to the closest destination, although other user-destination 
assignments can be used without any loss of generality. For all simulations, the number of destinations is taken as M = 2. 
Further, the power constraint per slot is set to P = 10 mW, the noise level is —90 dBm, and the SNR for information exchange 
is uq — 10 dB which implies a neighbor discovery circle radius of 1 km per user. For the channel model, the propagation loss is 
set to n — 3. All statistical results are averaged over the random positions of the users, eavesdroppers and destinations. 

In Fig. [2] we show a snapshot of the network structure resulting from the proposed coalition formation algorithm for a 
randomly deployed network with N = 15 users and K = 2 eavesdroppers for both DF (dashed lines) and AF (solid lines) 
protocols. For DF, the users self-organized into 6 coalitions with the size of each coalition strictly larger than K or equal to 1. For 
example, Users 4 and 15, having no suitable partners for forming a coalition of size larger than 2, do not cooperate. The coalition 
formation process is a result of Pareto order agreements for merge (or split) between the users. For example, in DF, coalition 
{5, 8, 10, 13} formed since all the users agree on its formation due to the fact that VX{5, 8, 10, 13}) = {</>({5, 8, 10, 13}) = 
[0.356 0.8952 1.7235 0.6213]} which is a clear improvement on the non-cooperative utility which was for all four users (due 
to proximity to eavesdropper 2). For AF, Fig. [2] shows that only users {5,8,13} and users {1,6,7,10} cooperate while all 
others remain non-cooperative. The main reason is that, in AF, the users need to amplify a noisy version of the signal using 

1 This general network setting simulates a broad range of network types ranging from ad hoc networks, to sensor networks, WLAN networks as well 
as broadband or cellular networks. 
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Fig. 2 A snapshot of a coalitional structure resulting from our Fig 3 Self-adaptation of the network's topology to mobility as User 
proposed coalition formation algorithm for a network with N = nia pig .|2] moves horizontally on the negative x-axis (for DF). 
15 users, M = 2 destinations and K = 2 eavedroppers for DF 
(dashed lines) and AF (solid lines). 

the beamforming weights. As a consequence, the noise can be highly amplified, and, for AF, cooperation is only beneficial in 
very favorable conditions. For example, coalitions {5, 8, 13} and {1, 6, 7, 10} have formed for AF due to being far from the 
eavesdroppers (relatively to the other users), hence, having a small cost for information exchange. In contrast, for coalitions such 
as {3, 11, 12}, the benefit from cooperation using AF is small compared to the cost, and, thus, these coalitions do not form. 

In Fig. [3] we show how the algorithm handles mobility through appropriate coalition formation decisions. For this purpose, 
the network setup of Fig. [2] is considered for the DF case while User 12 is moving horizontally for 1.1 km in the direction of 
the negative x-axis. First of all, User 12 starts getting closer to its receiver (destination 2), and, hence, it improves its utility. 
In the meantime, the utilities of User 12's partners (Users 3 and 11) drop due to the increasing cost. As long as the distance 
covered by User 12 is less than 0.2 km, the coalition of Users 3, 11 and 12 can still bring mutual benefits to all three users. 
After that, splitting occurs by a mutual agreement and all three users transmit independently. When User 12 moves about 
0.8 km, it begins to distance itself from its receiver and its utility begins to decrease. When the distance covered by User 12 
reaches about 1 km, it will be beneficial to Users 12, 4, and 15 to form a 3-user coalition through the merge rule since they 
improve their utilities from 4>4({4}) — 0.2577, 0i2({12}) = 0.7638, and </>i5({15}) = in a non-cooperative manner to 
V{{4, 12, 15}) = {</>({4, 12, 15}) = [1.7618 1.0169 0.6227]}. 

In Fig. [4] we show the performance, in terms of average utility (secrecy rate) per user, as a function of the network size 
N for both the DF and AF cases for a network with K = 2 eavesdroppers. First, we note that the performance of coalition 
formation with DF is increasing with the size of the network, while the non-cooperative and the AF case present an almost 
constant performance. For instance, for the DF case, Fig. [4] shows that, by forming coalitions, the average individual utility 
(secrecy rate) per user is increased at all network sizes with the performance advantage of DF increasing with the network size 
and reaching up to 25.3% and 24.4% improvement over the non-cooperative and the AF cases, respectively, at N — 45. This is 
interpreted by the fact that, as the number of users N increases, the probability of finding candidate partners to form coalitions 
with, using DF, increases for every user. Moreover, Fig. [4] shows that the performance of AF cooperation is comparable to the 
non-cooperative case. Hence, although AF relaying can improve the secrecy rate of large clusters of nearby cooperating users 
when no cost is accounted for such as in [10], in a practical wireless network and in the presence of a cooperation cost, the 
possibility of cooperation using AF for secrecy rate improvement is rare as demonstrated in Fig. [4] This is mainly due to the 
strong dependence of the secrecy rate for AF cooperation on the channel between the users as per ©, as well as the fact that, 
for AF, unless highly favorable conditions exist (e.g. for coalitions such as {1,6,7, 10} in Fig. [2} , the amplification of the 
noise resulting from beamforming using AF relaying hinders the gains from cooperation relative to the secrecy cost during the 
information exchange phase. 

In Fig. [5] we show the performance, in terms of average utility (secrecy rate) per user, as the number of eavesdroppers K 
increases for both the DF and AF cases for a network with N = 45 users. Fig.|4]shows that, for DF, AF and the non-cooperative 
case, the average secrecy rate per user decreases as more eavesdroppers are present in the area. Moreover, for DF, the proposed 
coalition formation algorithm presents a performance advantage over both the non-cooperative case and the AF case at all K. 
Nonetheless, as shown by Fig[5] as the number of eavesdroppers increases, it becomes quite difficult for the users to improve 
their secrecy rate through coalition formation; consequently, at K — 8, all three schemes exhibit a similar performance. Finally, 
similar to the results of Fig. [4] coalition formation using the AF cooperation protocol has a comparable performance with that 
of the non-cooperative case at all K as seen in Fig. [5] 

In Fig. [6] for DF cooperation, we show the average and average maximum coalition size resulting from the proposed algo- 
rithm as the number of users, N, increases, for a network with K = 2 eavesdroppers. Fig. [6] shows that both the average and 
average maximum coalition size increase with the number of users. This is mainly due to the fact that as N increases, the number 
of candidate cooperating partners increases. Further, through Fig.|6]we note that the formed coalitions have a small average size 
and a relatively large maximum size reaching up to around 2 and 6, respectively, at N = 45. Since the average coalition size is 
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Fig. 5 Performance in terms of the average individual user utility 
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Fig. 7 Average individual user utility as a function of the target SNR 
vq for information exchange for a network with N = 45 users, 
K = 2 eavesdroppers and M = 2 destinations for DF. 



below the minimum of 3 (as per Remark 1 due to having 2 eavesdroppers) and the average maximum coalition size is relatively 
large, the network structure is thus composed of a number of large coalitions with a few non-cooperative users. 

In Fig. [TJ the performance, in terms of average utility (secrecy rate) per user, of the network for different cooperation costs, 
i.e., target average SNRs v Q is assessed. Fig. [7] shows that cooperation through coalition formation with DF maintains gains, 
in terms of average secrecy rate per user, at almost all costs (all SNR values). However, as the cost increases and the required 
target SNR becomes more stringent these gains decrease converging further towards the non-cooperative gains at high cost since 
cooperation becomes difficult due to the cost. As seen in Fig. [7] the secrecy rate gains resulting from the proposed coalition 
formation algorithm range from 8.1% at uq = 20 dB to around 34.9% at i/q — 5 dB improvement relative to the non-cooperative 
case. 

The proposed algorithm's performance is further investigated in networks with N = 20 and N = 45 mobile users (random 
walk mobility) for a period of 5 minutes in the presence of K — 2 stationary eavesdroppers. During this period, the proposed 
algorithm is run periodically every 30 seconds. The results in terms of the frequency of merge and split operations per minute 
are shown in Fig. [8] for various speeds. As the speed increases, the frequency of both merge and split operations per minute 
increases due to the changes in the network structure incurred by the increased mobility. These frequencies reach up to around 
19 merge operations per minute and 9 split operations per minute for N = 45 at a speed of 72 km/h. Finally, Fig.[8]demonstrates 
that the frequency of merge and split operations increases with the network size N as the users become more apt to finding new 
cooperation partners when moving which results in an increased coalition formation activity. 

Fig.|9]shows, for DF, how the structure of the wireless network with N = 45 users and K = 2 mobile eavesdroppers evolves 
and self-adapts over time (a period of 5 minutes), while both eavesdroppers are mobile with a constant velocity of 50 km/h. The 
proposed coalition formation algorithm is repeated periodically by the users every 30 seconds, in order to provide self-adaptation 
to mobility. First, the users self-organize into 22 coalitions after the occurrence of 10 merge and split operations at time t = 0. As 
time evolves, through adequate merge and split operations the network structure is adapted to the mobility of eavesdroppers. For 
example, at time t = 1 minute, through a total of 6 operations constituted of 5 merge and 1 split, the network structure changes 



10 





120 150 18 
Time (seconds) 



Fig. 8 Frequency of merge and split operations per minute vs. speed 
of the users for different network sizes and K = 2 eavesdroppers 
with DF cooperation. 



Fig. 9 Evolution over time for a network with N = 45 users, M = 
2 destinations, and K = 2 eavesdroppers with DF cooperation when 
the eavesdroppers are moving with a speed of 50 km/h. 



from a partition of 26 coalitions back to a partition of 22 coalitions. Further, at t — 3 minutes, no merge or split operations occur, 
and, thus, the network structure remain unchanged. In summary, Fig.[9]illustrates how the users can take adequate merge or split 
decisions to adapt the network structure to the mobility of the eavesdroppers. 
6 Conclusions 

In this paper, we have studied the user behavior, topology, and dynamics of a network of users that interact in order to improve 
their secrecy rate through both decode-and-forward and amplify-and-forward cooperation. We formulated the problem as a 
non-transferable coalitional game, and proposed a distributed and adaptive coalition formation algorithm. Through the proposed 
algorithm, the mobile users are able to take a distributed decision to form or break cooperative coalitions through well suited rules 
from cooperative games while maximizing their secrecy rate taking into account various costs for information exchange. We have 
characterized the network structure resulting from the proposed algorithm, studied its stability, and analyzed the self-adaptation 
of the topology to environmental changes such as mobility. Simulation results have shown that, for decode-and-forward, the 
proposed algorithm allowed the users to self-organize while improving the average secrecy rate per user up to 25.3% and 24.4% 
(for a network with 45 users) relative to the non-cooperative and amplify-and-forward cases, respectively. 
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